What’s Vulnerable › Vulnerabilities

CVE-2017-16806

• Severity: high (CVSS 7.5 v3.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 91.5% probability of exploitation in the next 30 days
• Public exploit or detection template: yes
• Published: 2017-11-13 · updated 2026-06-17
• Weakness: CWE-22

Description

The Process function in RemoteTaskServer/WebServer/HttpServer.cs in Ulterius before 1.9.5.0 allows HTTP server directory traversal.

Affected products

• Ulterius Server: 1.5.6.0, 1.8.0.0

References

• https://github.com/Ulterius/server/commit/770d1821de43cf1d0a93c79025995bdd812a76ee
• https://www.exploit-db.com/exploits/43141/
• https://github.com/Ulterius/server/commit/770d1821de43cf1d0a93c79025995bdd812a76ee
• https://www.exploit-db.com/exploits/43141/

Get alerted when CVE-2017-16806 or the next vulnerability affects your stack